Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/921FA6429AD711F1AC677CC4CE1D38B0.roa
File:                     921FA6429AD711F1AC677CC4CE1D38B0.roa (raw, json)
Hash identifier:          LPID0xFIWcnKjke+6T1KJRXrXUg+hy+Be/70nBo/+K0=
Subject key identifier:   D8:00:49:A2:AB:61:B5:78:33:17:E5:FC:D3:22:F7:25:49:30:33:DC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/921FA6429AD711F1AC677CC4CE1D38B0.roa
Signing time:             Tue 18 Aug 2026 07:36:49 +0000
ROA not before:           Tue 18 Aug 2026 07:36:45 +0000
ROA not after:            Sat 19 Sep 2026 07:36:45 +0000
asID:                     147176
IP address blocks:        45.201.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118127 (0x1cd6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 07:36:45 2026 GMT
            Not After : Sep 19 07:36:45 2026 GMT
        Subject: CN=6a840b91-96ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:0c:e5:94:fd:d3:b5:16:d3:3b:5e:77:4f:
                    46:7a:a5:de:bd:ee:48:b1:eb:10:7f:a9:24:d3:0b:
                    30:b0:ca:89:9c:1f:52:a4:17:e8:d3:d9:32:27:94:
                    e1:42:de:7d:d1:c2:39:ed:e2:46:0d:e5:eb:04:28:
                    04:7f:09:e2:0b:c4:42:35:f1:28:43:cc:32:ca:c7:
                    90:cd:7e:fc:b7:f3:99:fd:e3:93:51:b5:ce:e6:b7:
                    6e:c1:4f:6e:17:bc:ca:8e:8a:d2:81:5d:82:e4:cc:
                    1c:1a:dd:57:a1:5a:da:16:81:40:be:f3:fd:e8:54:
                    2a:8b:17:7f:67:bd:81:ef:eb:ee:f3:26:5e:51:6f:
                    84:a5:87:1e:4b:f5:f8:58:5e:16:4c:87:50:f7:e8:
                    59:7e:b7:15:c9:a5:c5:46:7a:6e:d0:13:08:e4:71:
                    48:1c:a0:43:b4:40:7c:3b:16:c1:6c:38:35:c7:8c:
                    c9:0e:81:73:a3:91:01:46:da:f1:9e:0f:7e:bf:ad:
                    f6:f9:ba:93:12:20:83:50:12:43:a2:2f:3a:0a:bc:
                    ab:2f:a0:71:b9:b3:10:5b:f0:98:83:94:b9:5a:77:
                    22:b0:29:99:38:cc:32:22:53:5f:39:63:97:f5:ec:
                    76:6d:bc:e7:17:7a:c4:93:51:d2:a0:2e:d3:e4:c4:
                    d2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:00:49:A2:AB:61:B5:78:33:17:E5:FC:D3:22:F7:25:49:30:33:DC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/921FA6429AD711F1AC677CC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:3f:cf:08:96:a2:48:9d:32:e7:f6:6b:5c:9d:fd:93:74:3e:
         44:af:68:ed:10:bb:06:c4:24:53:29:f0:de:d6:b5:bf:88:fc:
         f8:80:31:76:ca:59:63:b3:2c:70:5e:57:0d:75:e1:f3:90:e9:
         37:d7:bc:c7:b8:0b:74:3c:14:14:43:c6:46:19:16:33:1f:c1:
         84:9d:f4:65:57:a7:3d:2e:91:5f:65:81:4a:5c:e5:d0:1a:39:
         b1:c6:1f:1d:7a:b4:5f:65:19:fe:3d:57:11:6f:7f:f5:ad:f0:
         e0:42:4f:a8:54:b2:04:7f:0e:44:d4:1e:71:1f:07:bf:37:4d:
         19:4e:8f:b3:ac:ad:db:0e:15:36:f3:5b:9a:10:a8:a0:8a:9c:
         4a:e7:54:ff:63:21:9b:88:45:a7:fb:33:c5:7a:da:23:62:fa:
         7b:e7:3c:7b:3a:63:16:47:ee:50:e7:3b:1a:4f:38:e5:49:55:
         15:f1:63:00:5e:07:c1:b4:51:26:4a:5d:c8:07:0b:e5:2f:33:
         5c:e9:a5:fe:74:1d:5d:0d:43:92:da:18:88:78:eb:31:00:f4:
         ea:60:3d:d1:91:09:86:09:71:f7:16:73:6e:01:1d:88:b9:21:
         6f:ad:92:33:be:a9:a1:bb:c9:51:04:a5:38:7c:61:91:79:99:
         4a:e4:eb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----